| 一种改进的针对复合文档的Fuzz测试技术 |
| |
| 引用本文： | 任春钰,舒辉,瞿进. 一种改进的针对复合文档的Fuzz测试技术[J]. 计算机应用, 2008, 28(2): 535-537 |
| |
| 作者姓名： | 任春钰 舒辉 瞿进 |
| |
| 作者单位： | 信息工程大学,信息工程学院,郑州,450002 |
| |
| 摘 要： | Fuzz测试是一种黑盒测试技术，通常用于发现应用程序以及协议的漏洞。利用这种技术对使用简单格式数据的应用程序或者网络协议进行安全性测试时效果比较显著,但是在对大型办公软件的安全性测试中，由于其软件文件格式复杂，暴力Fuzz测试效率低下。为了提高对办公软件安全性测试的效率，针对它所采用的复合文档文件类型，根据其结构化存储的特征，提出了一种有效的Fuzz测试策略。
|
| 关 键 词： | Fuzz测试 办公软件 复合文档 |
| 文章编号： | 1001-9081（2008）02-0535-03 |
| 收稿时间： | 2007-09-06 |
| 修稿时间： | 2007-11-19 |
Improved fuzz testing for compound document |
| |
| REN Chun-yu,SHU Hui,ZHAI Jin. Improved fuzz testing for compound document[J]. Journal of Computer Applications, 2008, 28(2): 535-537 |
| |
| Authors: | REN Chun-yu SHU Hui ZHAI Jin |
| |
| Affiliation: | REN Chun-yu,SHU Hui,ZHAI Jin(Institute of Information Engineering,Information Engineering University,Zhengzhou Henan 450002,China) |
| |
| Abstract: | Fuzz testing is a kind of black box testing, which is used to discover the bugs in the applications and protocols. When being used in testing the application with network service and software with simple file format, fuzz testing performs efficiently, but it is ineffective in testing the software with complex file format because of the force and stochastic fuzzing data. The paper gave an effective fuzz testing strategy in testing the software with complex file format based on the structural storage characteristics of compound document formats. |
| |
| Keywords: | Fuzz testing office software compound document |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机应用》浏览原始摘要信息 |
|
点击此处可从《计算机应用》下载全文 |
|
